Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

packages/cel - add 'condition' variable #12555

Open
wants to merge 2 commits into
base: main
Choose a base branch
from

Conversation

andrewkroh
Copy link
Member

Proposed commit message

Add a user configurable 'condition' variable to allow users to control when 
the input should run. An example use case would be to apply Kubernetes 
autodiscovery conditions.

See https://www.elastic.co/guide/en/fleet/current/dynamic-input-configuration.html

Closes #12521

@andrewkroh andrewkroh added Integration:cel Custom API using Common Expression Language Integration:proofpoint_on_demand Proofpoint On Demand labels Jan 31, 2025
@@ -358,6 +366,7 @@ policy_templates:
show_user: false
description: >
Processors are used to reduce the number of fields in the exported event or to enhance the event with metadata. This executes in the agent before the logs are parsed. See [Processors](https://www.elastic.co/guide/en/beats/filebeat/current/filtering-and-enhancing-data.html) for details.

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

(Added by elastic-agent format.)

Add a user configurable 'condition' variable to allow users to control
when the input should run. An example use case would be to apply Kubernetes
autodiscovery conditions.

See https://www.elastic.co/guide/en/fleet/current/dynamic-input-configuration.html

Closes elastic#12521
@andrewkroh andrewkroh force-pushed the cel/feature/add-condition branch from ba53f48 to 460dd54 Compare January 31, 2025 18:04
@andrewkroh andrewkroh added enhancement New feature or request and removed Integration:proofpoint_on_demand Proofpoint On Demand labels Jan 31, 2025
@andrewkroh andrewkroh marked this pull request as ready for review January 31, 2025 18:05
@andrewkroh andrewkroh requested a review from a team as a code owner January 31, 2025 18:05
@andrewkroh andrewkroh added the Team:Security-Service Integrations Security Service Integrations Team [elastic/security-service-integrations] label Jan 31, 2025
@elasticmachine
Copy link

Pinging @elastic/security-service-integrations (Team:Security-Service Integrations)

@elasticmachine
Copy link

💚 Build Succeeded

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request Integration:cel Custom API using Common Expression Language Team:Security-Service Integrations Security Service Integrations Team [elastic/security-service-integrations]
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants